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Customer's Smart Card Swiped In 
Merchant's Card Reader 
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Merchant's Reader Authenticates Itself To The Smart Card By Passing Unique 
Merchant Information (M) To The Smart Card, Including: 

1 . A List Of Credit Card Issuers Supported By The Merchant; 

2. A Valid Credit Card Issuer Merchant Number, For 

Each Credit Card Issuer Supported By The Merchant; 

3. A Transaction Number, For Each Credit Card Issuer 

Supported By The Merchant; 

4. Time/Date Of Transaction; And 

5. The Purchase Amount. 
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Merchant's Reader Asks The Smart Card For A Billing Digest 
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The Smart Card Compares The List Of Credit Card Issuers Supported By The Merchant 
With The Customer's Credit Card Accounts And Selects A Credit Card Issuer To Transact 
With (All Non-Selected Credit Card Issuer Information Is Discarded By The Smart Card) 
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The Smart Card Retrieves Unique Customer Values Including: 

1 . The Customer's Credit Card Number (C), For The Selected Credit Card Account 

2. The Smart Card Number (G); 

3. The Current Reference Number (n); And 

4. Master Key (KM) For The Selected Credit Card Account. 
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The Smart Card Concatenates Unique Customer Values, 
Customer Credit Card Number (C), The Smart Card Number (G) 
And The Current Reference Number (n) Into Unique Customer 
Information (N) 
312 



Invoke GetNextDigestQ 



The Smart Card Prepares A Billing Digest Using 
The Unique Merchant Information (M), A Master Key From The 
Credit Card Issuer (KM) And Unique Customer Information (N) 
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The Smart Card Sets The Value Of Current Reference Number (n): 

n = n + 1 
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The Digest, Unique Merchant Information (M) And Unique 
Customer Information (N) Are Passed To The Merchant 
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Merchant Transmits Billing Digest, Unique Merchant Information 
(M) And Unique Customer Information (N) To The Credit Card 

Issuer 
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Credit Card Issuer Receives Billing Digest, Unique Merchant Information 
(M) And Unique Customer Information (N) From The Merchant 
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Credit Card Issuer Uses Parsing Algorithm To Parse The Unique 
Customer Information (N) Into The Unique Customer Values: 

1 . The Customer's Credit Card Number (C); 

2. The Smart Card Number (G); 

3. The Current Reference Number (n). 



Current Reference Number (n) Is Compared To All Previous 
Reference Numbers Used To Conduct Previous Transactions 
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Using The Customer's Credit Card Number (C), The Credit Card 
Issuer Looks Up The Master Key (KM) Issued To The Customer 
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Invoke GetNextDigestQ 



The Credit Card Issuer Prepares An Authentication Billing Digest 
Using The Unique Merchant Information (M), The Master Key 
(KM) And Unique Customer Information 
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Deny Transaction, Alert Security Of 
A Possible Fraud Being Perpetrated 
And Returns A Declination 
Response And/Or Transmission 
Error To The Merchant 
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Credit Card Issuer's 
Authentication Billing Digest = Billing Digest 
Transmitted From Merchant? 
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Debit Customer's Account For The Purchase Amount, Credits 
Merchant's Account For The Purchase Amount And Return 
Transaction Confirmation To The Merchant 
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Perform HMAC Processing, Create Variables KJpad And K_opad 
And Copy The Master Key (KM) On To Each 
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For Each Byte In KJpad, Exclusive OR (XOR) 0x36 Onto It, And 
For Each Byte In K_opad, Exclusive OR (XOR) 0x5c Onto It 
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Input KJpad To The SHA-1 Hashing Process 
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Get Variable N (Unique Customer Information) From 
The Merchant's Transmission 
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Add Variable N To SHA-1 Process 
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Add Master Key Value (KM) To SHA-1 Process 
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Add K_opad To The SHA-1 Hashing Process 
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Output Authentication Billing Digest 
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Customer's Smart Card Swiped In 
Merchant's Card Reader 
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Merchant's Reader Authenticates Itself To The Smart Card By Passing Unique 
Merchant Information (M) To The Smart Card, Including: 

1 . A List Of Credit Card Issuers Supported By The Merchant; 

2. A Valid Credit Card Issuer Merchant Number, For 

Each Credit Card Issuer Supported By The Merchant; 

3. A Transaction Number, For Each Credit Card Issuer 

Supported By The Merchant; 

4. Time/Date Of Transaction; And 

5. The Purchase Amount. 
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Merchant's Reader Asks The Smart Card For A Billing Digest 
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The Smart Card Compares The List Of Credit Card Issuers Supported By The Merchant 
With The Customer's Credit Card Accounts And Selects A Credit Card Issuer To Transact 

With (All Non-Selected Credit Card Issuer Information Is Discarded By The Smart Card) 
M 
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The Smart Card Retrieves Unique Customer Values Including: 

1 . The Customer's Credit Card Number (C), For The Selected Credit Card Issuer 

2. The Smart Card Number (G); 

3. The Current Reference Number (n); 

4. Master Key (KM) For The Selected Credit Card Issuer; And 

5. Public Key (KP) For The Selected Credit Card Issuer 
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The Smart Card Concatenates Unique Customer Values, Customer 

Credit Card Number (C), The Smart Card Number (G) And The 
Current Reference Number (n) Into Unique Customer Information (N) 
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Invoke GetNextDigest() 

The Smart Card Prepares A Billing Digest 
The Unique Merchant Information (M), A Master Key From The 
Credit Card Issuer (KM) And Unique Customer Information (N) 
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The Smart Card Sets The Value Of Current Reference Number (n): 

n = n + 1 
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The Smart Card Encrypts The Unique Merchant Information (M) And Unique 
Customer Values (N) Using The Credit Card Issuer's Public Key (KP) 
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The Digest, Encrypted Unique Merchant Information (M) And Encrypted 
Unique Customer Values (N) Are Passed To The Merchant 
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Merchant Transmits Billing Digest, Encrypted Unique Merchant 
Information (M) And Encrypted Unique Customer Information (N) To 
The Credit Card Issuer 
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Credit Card Issuer Receives Billing Digest, Encrypted Unique 
Merchant Information (M) And Encrypted Unique Customer 
Information (N) From The Merchant 
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Credit Card Issuer Decrypts The Unique Merchant Information 
(M) And Unique Customer Information (N) Using A Private Key 
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Credit Card Issuer Uses Parsing Algorithm To Parse The Unique 
Customer Information (N) Into The Unique Customer Values: 

1 . The Customer's Credit Card Number (C); 

2. The Smart Card Number (G); 

3. The Current Reference Number (n). 
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Current Reference Number (n) Is Compared To All Pervious 
Reference Numbers Used To Conduct Previous Transactions 
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Deny Transaction, Alert 
Security Of A Possible Fraud 
Being Transacted And Return 
Declination Response To The 
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Using The Customer's Credit Card Number (C), The Credit Card 
Issuer Looks Up The Master Key (KM) Issued To The Customer 
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Invoke GetNextDigestQ 



The Credit Card Issuer Prepares A Authentication Billing Digest 
Using The Unique Merchant Information (M), The Master Key 
(KM) And Unique Customer Information (N) 
716 



Credit Card Issuer's 
Authentication Billing Digest = Billing Digest 
Transmitted From Merchant? 
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Debit Customer's Account For The Purchase Amount, Credit 
Merchant's Account For The Amount Of Purchase And Return 
Transaction Confirmation To The Merchant 
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Deny Transaction, Alert 
Security Of A Possible Fraud 
Being Transacted And Return 
Declination Response And/Or 
Transmission Error To The 
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